Web lists-archives.com

Re: [Samba] gpo not applied a boot computer

On Tue, 26 Feb 2019 17:42:23 +0100
David Jehin <bedou210977@xxxxxxxxx> wrote:

> compiled samba version : 4.8.5  and my distribution is: debian
> stretch 9.6 

How did you compile Samba ?
Did you just compile it with './configure' or did you create your
own .debs ?
I ask this because of '/var/lib/samba/private/secrets.keytab'
Normally if you just compiled Samba it goes into /usr/local/samba
unless you set a prefix, so I would have expected something
like /usr/local/samba/private/secrets.keytab.

Are you also aware that you can find Debian Samba packages here:


Is Apparmor running and blocking access to the keytab ?

Have you tried running some of the basic tests on both DC's ?

samba-tool dbcheck



>I said that when I join the domain, restarting the
> machine takes the GPO, the other restart does not take the gpo
> computer. Thanks for your help

Not entirely sure what the above means, is it that a GPO is applied to
one computer but not another, or only one GPO is applied but another


To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba